vendor:
blueman
by:
the grugq, bcoles
8.4
CVSS
HIGH
Python code injection vulnerability
78
CWE
Product Name: blueman
Affected Version From: 1.23
Affected Version To: 2.0.2
Patch Exists: YES
Related CWE: CVE-2015-8612
CPE: a:blueman_project:blueman
Other Scripts:
N/A
Platforms Tested: Debian 8 Jessie (x64)
2015
blueman set_dhcp_handler D-Bus Privilege Escalation
This module attempts to gain root privileges by exploiting a Python code injection vulnerability in blueman versions prior to 2.0.3. The `org.blueman.Mechanism.EnableNetwork` D-Bus interface exposes the `set_dhcp_handler` function which uses user input in a call to `eval`, without sanitization, resulting in arbitrary code execution as root.
Mitigation:
Upgrade to blueman version 2.0.3 or later